🇩🇪
BlueWire Hosting
2026-06-11 14:03:37
(1 week ago)
Wordpress brute force attempt
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-11 02:56:16
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-06-06 12:19:25
(2 weeks ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-06 12:04:23
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇮🇹
LTM
2026-05-07 06:20:01
(1 month ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
2026-04-26 07:08:44
(1 month ago)
Forum/form spam
Web Spam
🇩🇪
LRob.fr
2026-04-17 06:45:07
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-04-01 18:17:16
(2 months ago)
Forum/form spam
Web Spam
🇦🇹
Markus Woegerbauer
2026-02-13 06:51:35
(4 months ago)
(mod_security) mod_security triggered on hostname [redacted] 104.207.43.168 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-02-13 05:04:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:04:16.042375 2026] [security2:error] [pid 1761:tid 1761] [client 104.207.43.168:16501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matchsticbranding.agency"] [uri "/api/.env"] [unique_id "aY6w0GXXjH64Uzc0r6SAAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-13 04:35:21
(4 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.43.168 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.43.168 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:28:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:28:14.243139 2026] [security2:error] [pid 27468:tid 27468] [client 104.207.43.168:37271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mamasquad.com"] [uri "/backend/.env"] [unique_id "aY6MPmFpdXWLD0_EUe7_zgAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:24:31
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:24:26.145060 2026] [security2:error] [pid 28926:tid 28926] [client 104.207.43.168:41473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magnawebinc.com"] [uri "/.env"] [unique_id "aY59SoQCtUceroKZXdcOvgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 18:01:15
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 13:00:34.062864 2026] [security2:error] [pid 12811:tid 12811] [client 104.207.43.168:59457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dossat.cl"] [uri "/.env"] [unique_id "aY4VQtCPZ6pY3MuRUzI1CgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 17:30:34
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:30:28.878640 2026] [security2:error] [pid 31587:tid 31587] [client 104.207.43.168:50033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deltasouls.com"] [uri "/.env"] [unique_id "aY4ONAP0tiw8DkL8axG_mQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack